Becoming the Hacker is an ebook by Adrian Pruteanu an accomplished security consultant and researcher. This is a clear guide to web application security from an attacker’s point of view.
This ebook actually costs around $31.99, now for a limited time period its available for free.
To get the ebook for free, visit this giveaway page set by TradePub.
Fill a small form and hit the “Download” button.
Note: This giveaway expires on 03/03/20.
Contents
Becoming the Hacker ebook- Description:
Becoming the Hacker will teach you how to approach web penetration testing with an attacker’s mindset. While testing web applications for performance is common, the
ever-changing threat landscape makes security testing much more difficult for the defender.
There are many web application tools that claim to provide a complete survey and defense against potential threats, but they must be analyzed in line with the
security needs of each web application or service. We must understand how an attacker approaches a web application and the implications of breaching its defences.
Through the first part of the book, Adrian Pruteanu walks you through commonly encountered vulnerabilities and how to take advantage of them to achieve your
goal.
The latter part of the book shifts gears and puts the newly learned techniques into practice, going over scenarios where the target may be a popular content management system or a containerized application and its network.
Who this book is for
The reader should have basic security experience, for example, through running a network or encountering security issues during application development.
Formal education in security is useful, but not required. This title is suitable for people with at least two years of experience in development, network management, or DevOps,
or with an established interest in security.
Adrian Pruteanu worked primarily in the offensive security space. In his career of over 10 years, he has gone through countless penetration testing engagements, red team
exercises, and application security assessments.
He routinely works with Fortune 500 companies, helping them secure their systems by identifying vulnerabilities or reversing malware samples. Adrian likes to keep up with his certifications as
well, and holds several of them, including CISSP, OSCE, OSCP, GXPN, GREM, and a bunch of Microsoft titles as well.